They are not allowed actually. However maybe a few were anyway? As far as I can tell, this attack was fully unsuccessful anyway. They probably discovered phish

They are not allowed actually. However maybe a few were anyway? As far as I can tell, this attack was fully unsuccessful anyway. They probably discovered phishing attempts with a link to a page deploying a curious payload. Regardless of my post above, keep in mind I do use Firefox primarily and see nothing wrong with it.